-
Notifications
You must be signed in to change notification settings - Fork 0
65 lines (52 loc) · 2.1 KB
/
cicd.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
name: CI/CD Pipeline
on:
push:
branches:
- main
jobs:
deploy:
runs-on: ubuntu-latest
env:
PROJECT_ID: ${{ secrets.PROJECT_ID }}
GCE_INSTANCE: ${{ secrets.GCE_INSTANCE }}
GCE_INSTANCE_ZONE: ${{ secrets.GCE_INSTANCE_ZONE }}
REGION: ${{ secrets.GCE_REGION }}
SSH_HOST: ${{ secrets.SSH_HOST }}
SSH_USER: ${{ secrets.SSH_USER }}
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
DATABASE_URL: ${{ secrets.DATABASE_URL }}
GCS_BUCKET_NAME: ${{ secrets.BUCKET_NAME }}
steps:
- name: Checkout code
uses: actions/checkout@v2
- id: "auth"
uses: "google-github-actions/auth@v2"
with:
credentials_json: "${{ secrets.GCP_SA_KEY }}"
- name: "Set up Cloud SDK"
uses: "google-github-actions/setup-gcloud@v2"
- name: "Use gcloud CLI"
run: "gcloud info"
- name: Configure Docker for Artifact Registry
run: |
gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev
- name: Build and push Docker image
run: |
echo "${{ env.GCP_SA_KEY }}" > gcp-service-account-key.json
docker build --build-arg DATABASE_URL=${{ env.DATABASE_URL }} --build-arg GCS_BUCKET_NAME=${{ env.GCS_BUCKET_NAME }} --build-arg GCP_SA_KEY="${{ env.GCP_SA_KEY }}" -t ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/arsip-template/app:$GITHUB_SHA .
docker push ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/arsip-template/app:$GITHUB_SHA
- name: Setup SSH
uses: webfactory/[email protected]
with:
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
- name: Deploy to SSH server
run: |
ssh -o StrictHostKeyChecking=no ${{ env.SSH_USER }}@${{ env.SSH_HOST }} '
cd /path/to/your/project
# Update docker-compose.yml to include GCP_SA_KEY
sed -i "s|GCP_SA_KEY=.*|GCP_SA_KEY=${{ env.GCP_SA_KEY }}|g" docker-compose.yml
docker-compose pull
docker-compose down
docker-compose up -d
'